Whist it could be related to a different boot manager, I don't know if that would also change the MBR.
However, your aswMBR.txt content is almost identical to another were the Aluron rootkit has been confirmed and if correct you are going to need investigate further and if confirmed help to remove it.
See this topic, the one starting on page 2 for drankinboy
http://forum.avast.com/index.php?topic=77998.msg645836#msg645836.
Whilst essexboy won't be back on the forums until this evening (UK time), you could run the OTS tool and post the log so he has something else to work with.
Unfortunately no two attacks are the same so first I will need to see what you have.
Download OTS to your Desktop and double-click on it to run it
- Make sure you close all other programs and don't use the PC while the scan runs.
- Select All Users
- Under additional scans select the following
Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check
- Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
volsnap.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT
- Now click the Run Scan button on the toolbar. Make sure not to use the PC while the program is running or it will freeze.
- When the scan is complete Notepad will open with the report file loaded in it.
- Please attach the log in your next post.
Why was it that you ran aswMBR in the first place ?